Update toolchain to match latest template

Includes some v fussy lint fixes in the README.

Author: microbit-matt-hillsdon

.checkov.yml

@@ -0,0 +1,7 @@
+# See: https://www.checkov.io/1.Welcome/Quick%20Start.html
+
+compact: true
+quiet: true
+skip-path:
+  - coverage
+  - node_modules

.eslintignore

@@ -10,9 +10,12 @@
 name: Check Transpiled JavaScript
 
 on:
+  pull_request:
+    branches:
+      - main
   push:
     branches:
-      - '**'
+      - main
 
 permissions:
   contents: read
@@ -25,11 +28,11 @@ jobs:
     steps:
       - name: Checkout
         id: checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
 
       - name: Setup Node.js
         id: setup-node
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
           node-version-file: .node-version
           cache: npm
@@ -47,6 +50,11 @@ jobs:
       - name: Compare Directories
         id: diff
         run: |
+          if [ ! -d dist/ ]; then
+            echo "Expected dist/ directory does not exist.  See status below:"
+            ls -la ./
+            exit 1
+          fi
           if [ "$(git diff --ignore-space-at-eol --text dist/ | wc -l)" -gt "0" ]; then
             echo "Detected uncommitted changes after build. See status below:"
             git diff --ignore-space-at-eol --text dist/
@@ -58,7 +66,7 @@ jobs:
       - if: ${{ failure() && steps.diff.outcome == 'failure' }}
         name: Upload Artifact
         id: upload
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v5
         with:
           name: dist
           path: dist/

.github/workflows/check-dist.yml

@@ -1,9 +1,12 @@
 name: Continuous Integration
 
 on:
+  pull_request:
+    branches:
+      - main
   push:
     branches:
-      - '**'
+      - main
 
 permissions:
   contents: read
@@ -16,11 +19,11 @@ jobs:
     steps:
       - name: Checkout
         id: checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
 
       - name: Setup Node.js
         id: setup-node
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
           node-version-file: .node-version
           cache: npm
@@ -40,16 +43,3 @@ jobs:
       - name: Test
         id: npm-ci-test
         run: npm run ci-test
-
-  test-action:
-    name: GitHub Actions Test
-    runs-on: ubuntu-latest
-
-    steps:
-      - name: Checkout
-        id: checkout
-        uses: actions/checkout@v4
-
-      - name: Test Local Action
-        id: test-action
-        uses: ./

.github/workflows/ci.yml

@@ -1,6 +1,9 @@
 name: CodeQL
 
 on:
+  pull_request:
+    branches:
+      - main
   push:
     branches:
       - main
@@ -22,24 +25,25 @@ jobs:
       fail-fast: false
       matrix:
         language:
-          - TypeScript
+          - typescript
 
     steps:
       - name: Checkout
         id: checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
 
       - name: Initialize CodeQL
         id: initialize
-        uses: github/codeql-action/init@v3
+        uses: github/codeql-action/init@v4
         with:
+          config-file: .github/codeql/codeql-config.yml
           languages: ${{ matrix.language }}
           source-root: src
 
       - name: Autobuild
         id: autobuild
-        uses: github/codeql-action/autobuild@v3
+        uses: github/codeql-action/autobuild@v4
 
       - name: Perform CodeQL Analysis
         id: analyze
-        uses: github/codeql-action/analyze@v3
+        uses: github/codeql-action/analyze@v4

.github/workflows/codeql-analysis.yml

@@ -1,9 +1,17 @@
+# This workflow will lint the entire codebase using the
+# `super-linter/super-linter` action.
+#
+# For more information, see the super-linter repository:
+#     https://github.com/super-linter/super-linter
 name: Lint Codebase
 
 on:
+  pull_request:
+    branches:
+      - main
   push:
     branches:
-      - '**'
+      - main
 
 permissions:
   contents: read
@@ -18,13 +26,13 @@ jobs:
     steps:
       - name: Checkout
         id: checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           fetch-depth: 0
 
       - name: Setup Node.js
         id: setup-node
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
           node-version-file: .node-version
           cache: npm
@@ -35,12 +43,18 @@ jobs:
 
       - name: Lint Codebase
         id: super-linter
-        uses: super-linter/super-linter/slim@v6
+        uses: super-linter/super-linter/slim@v8
         env:
+          CHECKOV_FILE_NAME: .checkov.yml
           DEFAULT_BRANCH: main
           FILTER_REGEX_EXCLUDE: dist/**/*
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          TYPESCRIPT_DEFAULT_STYLE: prettier
+          LINTER_RULES_PATH: .
           VALIDATE_ALL_CODEBASE: true
-          VALIDATE_JAVASCRIPT_STANDARD: false
+          VALIDATE_BIOME_FORMAT: false
+          VALIDATE_BIOME_LINT: false
+          VALIDATE_GITHUB_ACTIONS_ZIZMOR: false
+          VALIDATE_JAVASCRIPT_ES: false
           VALIDATE_JSCPD: false
+          VALIDATE_TYPESCRIPT_ES: false
+          VALIDATE_JSON: false

.github/workflows/linter.yml

@@ -1 +1 @@
-20.6.0
+24.1.0

.node-version

@@ -1,12 +1,12 @@
-# NPM package versioner GitHub action
+# npm package versioner GitHub Action
 
 [![GitHub Super-Linter](https://github.com/actions/typescript-action/actions/workflows/linter.yml/badge.svg)](https://github.com/super-linter/super-linter)
 ![CI](https://github.com/actions/typescript-action/actions/workflows/ci.yml/badge.svg)
 [![Check dist/](https://github.com/actions/typescript-action/actions/workflows/check-dist.yml/badge.svg)](https://github.com/actions/typescript-action/actions/workflows/check-dist.yml)
 [![CodeQL](https://github.com/actions/typescript-action/actions/workflows/codeql-analysis.yml/badge.svg)](https://github.com/actions/typescript-action/actions/workflows/codeql-analysis.yml)
 [![Coverage](./badges/coverage.svg)](./badges/coverage.svg)
 
-A GitHub Action that automatically manages semantic versioning for NPM packages
+A GitHub Action that automatically manages semantic versioning for npm packages
 based on your CI/CD context.
 
 ## Purpose
@@ -16,9 +16,9 @@ file based on the GitHub Actions environment. It generates semantic version
 numbers appropriate to your build context:
 
 - **Tags**: Uses the tag name as the version (e.g., `v1.2.3` becomes `1.2.3`)
-- **Branches**: Creates pre-release versions with the branch name and build
+- **Branches**: Creates prerelease versions with the branch name and build
   number (e.g., `1.0.0-feature.123.456`)
-- **Local development**: Adds a `-local` pre-release identifier
+- **Local development**: Adds a `-local` prerelease identifier
 
 This eliminates manual version management and ensures consistent versioning
 across your CI/CD pipeline.
@@ -86,33 +86,56 @@ This makes it clear that:
 
 - The version is automatically managed by the CI/CD pipeline
 - The checked-in version is not intended for publication
-- Local development will use the `-local` pre-release identifier
+- Local development will use the `-local` prerelease identifier
 
 The action will overwrite this placeholder with the appropriate version during
 your CI/CD workflow.
 
 ## Development
 
-1. :hammer_and_wrench: Install the dependencies
+### Prerequisites
+
+- Node.js 24.x or later
+- npm
+
+### Setup and Building
+
+1. Install the dependencies
 
    ```bash
    npm install
    ```
 
-1. Format, test, and build the action
+2. Format, test, and build the action
 
    ```bash
    npm run all
    ```
 
-   > This step is important! It will run [`ncc`](https://github.com/vercel/ncc)
-   > to build the final JavaScript action code with all dependencies included.
-   > If you do not run this step, your action will not work correctly when it is
-   > used in a workflow. This step also includes the `--license` option for
-   > `ncc`, which will create a license file for all of the production node
-   > modules used in your project.
-
-This generates files that must be committed.
+   This will:
+   - Format code with Prettier
+   - Lint with ESLint
+   - Run tests with Jest
+   - Generate coverage reports
+   - Build the distribution bundle with Rollup
+
+   > **Important:** The build step uses [Rollup](https://rollupjs.org/) to
+   > bundle the TypeScript source into a single ES module at `dist/index.js`
+   > with all dependencies included. You must run `npm run all` (or
+   > `npm run package`) before committing to ensure the `dist/` directory is up
+   > to date.
+
+### Available Scripts
+
+- `npm run format:write` - Format code with Prettier
+- `npm run format:check` - Check code formatting
+- `npm run lint` - Lint code with ESLint
+- `npm test` - Run tests
+- `npm run coverage` - Generate coverage badge
+- `npm run package` - Build the distribution bundle
+- `npm run all` - Run all of the above
+
+The generated `dist/` directory must be committed to the repository.
 
 ## License
 

README.md

@@ -1,5 +1,4 @@
-/* eslint-disable @typescript-eslint/no-floating-promises */
-import { contextFromEnvironment, generateVersion } from '../src/version'
+import { contextFromEnvironment, generateVersion } from '../src/version.js'
 
 describe(`generateVersion`, () => {
   const defaultContext = {